CVE-2022-25853

Published February 6th, 2023

View on NVD ↗

CVSS v3

7.4

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.

jtrussell/semver-tags

Get semver tags for a repo (git or svn)

GitHub

9